Privacy Policy – Mazzini Lab & ESG4GLAM Project

This Privacy Policy outlines how your personal data is collected, used, and protected in compliance with the General Data Protection Regulation (GDPR). This document also includes the extended authorization for data processing related to the ESG4GLAM Erasmus+ project.

1. Data Controller

The Data Controller is Mazzini Lab. You can contact the Data Controller for any privacy-related matters at the following email address: privacy@mazzinilab.it.

2. Categories of Processed Data

The Data Controller processes the following categories of personal data:

• Personal details: Name, surname, age, and gender.

• Contact information: Residence or domicile address, telephone number, and email address.

• Identification data: Tax code (codice fiscale).

• Professional information: Data relating to your professional activity.

3. Purposes of the Processing

Your personal and potentially sensitive data, provided voluntarily, will be processed for the following purposes until you object:

• Registering to the website.

• Subscribing to the email newsletter.

• Sharing content present on the site.

• Fulfilling generic requests for information.

• Sending commercial and promotional communications related to projects, activities, and fundraising initiatives.

• Conducting surveys and research reserved for donors and subjects who have shown interest in the Data Controller’s actions, aiming to raise public awareness.

• ESG4GLAM Project Purposes: Managing your involvement as a stakeholder in the ESG4GLAM project, which includes gathering insights via surveys, granting early access to the 35-hour VET Training Course, and providing access to the digital ESG Knowledge Box.

4. Data Processing Methods

Your data is collected and recorded lawfully and fairly for the aforementioned purposes. The processing is carried out using electronic and automated tools, which includes insertion and organization within databases, strictly complying with the security measures mandated by the GDPR.

5. Data Sharing and Authorized Recipients (Including ESG4GLAM Partners)

Your data may be communicated to public or private entities, natural or legal persons, utilized by the Data Controller to perform activities instrumental to achieving the defined purposes, or to whom the Data Controller is legally or contractually obligated to communicate the data.

• Extended Authorization for ESG4GLAM: By accepting this Privacy Policy, you explicitly authorize the sharing and processing of your personal data with the Project Partners of the ESG4GLAM Consortium (as listed and updated on www.esg4glam.eu). The consortium partners will process your data strictly to fulfill the objectives of the Erasmus+ project, including market validation, EU competency standard establishment, training course prototyping, and the dissemination of project results.

6. Data Subject Rights

Under Articles 15 to 20 of the GDPR, you are granted specific rights regarding your personal data. By sending a request to privacy@mazzinilab.it, you have the right to:

• Obtain confirmation as to whether or not your personal data is being processed.

• Obtain the rectification of inaccurate data and the integration of incomplete personal data.

• Obtain the erasure of your data, provided one of the conditions set out in Art. 17 of the GDPR is met.

• Obtain the restriction of processing, in the cases provided for by Art. 18 of the GDPR.

• Receive your data in a structured, commonly used, and machine-readable format, and request its transmission to another data controller, if technically feasible (Data Portability).

In the event of your objection, your data will no longer be processed unless there are legitimate overriding grounds for the processing that outweigh your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.